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The success of Amphion is highly dependent on the consistency and completeness of the 
domain model it uses, and our role was to use the results we learned about interleaving to 
improve this model. 



Summary of Results 



Precondition extraction - we have been able to extract preconditions on the use of 
the SPICELIB routines. It is often difficult to detect the code responsible for checking 
these preconditions because it is usually tightly interleaved with the code for the pri- 
mary computation in order to take advantage of intermediate results computed for the 
primary computation. 



conditions to be determined once but used to attect execution at more than one loca- 
tion in the program-. We have discovered that the set of routines that are invoked with 
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In addition to analyses for detecting interleaving in the SPICELIB software library, we also 
performed empirical analyses to determine the coverage provided by the Amphion domain 
model. In particular, we obtained data on the following. 
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One of our analyses looked at the calling structure of routines in SPICELIB. In the course 
of this analysis, we were able to identify which subroutines are not called by any other 
subroutines. These are listed in the table on the next page. Either these represent high-level 



routines that are intended to be called externally by software that uses SPICELIB, or they are 
■‘dead” (no longer used). Perhaps they have been replaced by an optimized or more useful 
subroutine. 








4.3 Constant Parameters 



. if we are doing inter-procedural dataflow analysis, we might be able to partially evaluate 
the routine with the control parameter of interest in order to improve the precision of 
the analysis. 


In Fortran, control coupling is typically implemented by using a subprogram formal parame- 
ter as a control flag. We can find possible control flags by finding subprograms having formal 
parameters whose actuals are constants at every call-site in the application. Our analysis 
shows that 19 percent of the routines in SPICELIB are of this form. The routines are listed 
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Some subroutines in SPICELIB compute more than one output. When this occurs, the sub- 
routine is returning either the results of multiple distinct computations or a result whose 
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Appendix: Empirical Data on Amphion Domain 
Model 
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(if (rf : : indexable-name-has-params?(f c) ) 
then let( params : seq(rf : : expression-or- special) = 
rf : :function-params-or-indices(f c) ) 
reduce (union, image (get-vars-from-expr, params)) 


then flat-pars 

else flat-pars with rf : : identif ier-name(rf : : id-or-indexee(f c) ) 
function get-vars-from-expr ( e : rf :: expression ) : set (symbol) 
computed-using 

rf : : indexable-name(e) => get-vars-f rom-expr(e) = 
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computed-using 

rf : : expression(e) => get-vars-f rom-expr- or- special(e) 

get-vars-from-expr(e) , 
rf :: label-parameter (e) or rf :: null-ex (e) => 

get-vars-f rora-expr-or-special(e) * 
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if (rf : :indexable-name-has-params?(lhs) and-then 
defined? (rf : :function-params-or-indices(lhs) ) 
and-then 
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stmts : seq(rf :: program-unit-statement ) , 
vars : set(symbol)) : set(symbol) * 
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function prop-logical-if-statement ( stmt : rf : :logical-if-statement, 

vars : set (symbol) ) : 



let( elsif-vars : set(symbol) = 

if defined? (rf : :elseif-part (stmt)) then 

prop-if-then-else( rf : : elseif-part (stmt) , 
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else let(seed : condition-tuple-type * arb(candidates) ) 
let (out-str : string = 

precond-to-latex( seed.l, 



format (true, 

symbol-to-string ( 

rf : : identif ier-name( 

rf : : id-name (rf : :unit-heading(p))))) ; 
format(true, "] $"); 


p •- 

P 

© V 

I = 
Xl X 
© I 

P 

a, = 



CO 

•H 

CO 

>> 

to 

© 

i — 1 

•H 

13 

© 

S 

to 

rH 

1 

& 

© 

p 

CO 

© 

9 

P 

to 

>> 

© 

1 

to 






Hh 

© 







•H 

P 




P 



id 

CO 




© 



(3 

>■» 




P 




CO 




& 



CO 

1 




•H 



•H 

XI 




rH 



CO 

© 

• * 







o 

/— ~N 



u* 



rH 

1— 1 

© 



HH 



<d 

• * 




<c 




• • 

© 



ss 



© 

to 

1 







•H 

© 



© 



Hh 

(0 

•H 



43 



•rH 

>» 

43 



P 



© 

r-t 

P 






(3 

© 

V-/ 



O 



— 

(3 

© 


/-N 

P 



i-H 

© 

•H 


z 




(X 


W 



CO 



*■—> 

II 

>* 



(3 



1 


rH 


a 

o 



© 

© 

© 


o 

•H 



to 

•H 

c 


*H 

p 



© 

© 

© 

/^S 

P 

•rH 



(3 

>> 

1 

© 

fX 

xl 




rH 

a 


•H 

a 



CO 

© 

© 

© 

P 

o 



a. 


p 

1 

U 

u 



p 

© 

© 

© 

(0 

© 

II 


o 

1 


•H 

© 

p 



p 

a 

© 

43 

XI 

cx 

/-N 

II 

bO 

© 

i 

P 

XI 

1 




p 

fX 

w 

rt 

© 


bO 

to 

to 

p 

W 

© 

p 

to 

C 

p 

>> 

tx 

p 


3 

a 

•H 

o 

w 

© 

o 

r 

a, 

o 

P 

© 


p 

•H 


6 

•H 

P 

•r-> 

• * 

u 

P 

•> 

o 

P 

to 

o 

Hh 

i 

•H 

© 

u 

•H 


p 

P 

© 

XJ 

P 


X* 

• • 

fx 


43 

(3 

P 

*H 

a 



• * 


O 

P 

O 

o 

© 

CO 


© 

U 

v-/ 


u 

§ 

p 

© 

a 

© 

P 

a 

© 

Id 

© 



P 

© 

o 

p 

a 

CO 

CO 

• * 

(X 

6 

•H 

a, 

i 

p 

1 

© 

I 

P 

P 

i 

a 


to 

•H 

© 

o 

© 

hh 

© 

r 

•H 

© 

P 

hh 

N 

•H 

p 


43 


P 


•H 

id 

CO 


P 

r— 1 

cx 


rH 

a 

>s 


w 

© 

a 


<d 


CO 



P 

o 


•H 

<3 

V-' 


P 

© 

o 


O 

o 

P 


© 




© 

•H 

© 


» — 1 




(X 

P 

i— 1 






to 

U 









The file expr-to-latex.re 



elseif (rf : : literal-f alsa(e) ) 

then " \bf false " 

else format (false," “\pp\ ", 







P 


© 




bO 

II 

II 


0 


A 


o 



♦ *, 


CO 





Z 

0 



— 

•H 




X 1 







• • 




•H 

S~\ 

— 


P 

— 

- 

- 






* * 




II 

n 

P 

© 


it 

P 




r~i 


* ** 

/ \ 








P 

V-/ 

II 


CO 

II 

II 

|| 




*H 


s 






CO 

bO 


/**N 

| 




4-> 


/^> 

N-/ 



/ — \ 

0 


© 

© 

1 

0 

/*v 

© 

o 


/"-X 

/ — > 

•rl 


* 

p 


p 

/ — \ 

O 




o 

•rH 

© 

V-/ 

p 

© 

© 

© 

r— ( 



*H 


© 

XI 

*H 


bO 

bO 

p 

P 


bO 

1 


W 


1 



H 


•H 

•H 

CO 


0 

0 

1 

P 

bO 

0 

p 

bO 

bO 

bO 

<D 


** 

1 


P 


CO 


•H 

•H 

p 

CO 

0 

•H 

fX 

0 

0 

d 

-d 


P 

© 


■H 

© 

© 


P 

P 

IX 

| 

*H 

P 

X 

•H 

•H 


P 


P 

XI 


P 

9 

p 


P 

P 

X 

o 

P 

P 

© 

P 

P 

p 



(0 

P 


a 

© 

ex 


CO 

CO 

© 

p 

P 

CO 


P 

P 

p 

Xi 


t* 



© 

a 

X 


| 

1 


1 

CO 

1 

A 

CO 

CO 

CO 

P 


© 

•* 


TJ 

i 

© 


o 

o 

A 

p 

I 

o 

|| 

| 

1 

1 

bO 


d 

P 


•H 

p 

• • 


p 

p 

II 

IX 

o 

p 


o 

o 

o 

d 


v — ' 

P 


• • 

© 

• • 


1 

1 


X 

p 

1 


p 

p 

p 

© 

/• V 

X* 

co 


• • 

♦H 

p 


p 

p 


© 

t 

p 

© 

1 

1 

1 

rH 

* 

0 

> 


P 

P 

p 


IX 

(X 

© 


p 

IX 


p 

p 

p 

* 


© 

© 


P 

•H 



X 

X 


A 

IX 

X 

d 

IX 

IX 

IX 

* 


IX 

0 



P 



© 

© 

0 

II 

X 

© 

o 

X 

x 

x 

rH 


ix 

w 


• • 

d 





O 


© 


•H 

© 

© 

© 

1 \ 

II 

© 

x) 



© 

© 


A 

A 

■rH 



A 

CO 







d 


X> 

XI 



II 

II 

CO 

© 

A 

II 

CO 

A 

A 

A 

p 


1 

<1) 


*H 

•H 

N-/ 




CO 


n 


© 

|| 

|| 

II 

CD 

•H 

V 

cx 



• • 

bo 


/'""N 


© 

0 


/^v 

P 




> 



IX 


v-/ 

• • 

0 


© 

© 

p 

O 

/ s 

© 

Ph. 



/-\ 

O 

P 

p 

© 


bO 

P 

•H 




(X 

•H 

© 


X 

© 

© 

© 


•H 

p 



a 

P 

p 


0 

d 

X 

CO 


0 

© 

V-/ 

N-/ 

V-/ 

•rH 

. — 1 

to 

1 


•H 

v-/ 

p 


O 

o 

© 

(0 

0 

O 

1 

d 

d 

d 


1 

3 

V 


P 

bO 

CO 


•H 

•H 

1 

© 

O 

•H 

© 

o 

o 

o 

<D 

© 

© 



P 

a 

1 


GO 

CO 

© 

P 

■iH 

CO 

p 

•H 

•H 

•H 

P 

X! 

0 

p 


W 

*H 

o 

bO 

CO 

CO 

p 

IX 

CO 

CO 

© 

CO 

CO 

CO 

© 

P 


p 


1 

P 

p 

a 

© 

© 

© 

X 

CO 

© 

•H 

CO 

CO 

CO 

P 

w 

0 

to 


o 

P 

1 

•H 

P 

p 

0 

© 

© 

p 

P 

© 

© 

© 

© 

P 

© 

:* 

P 

p 

CO 

p 

W 

IX 

<x 

© 

1 

P 

IX 

d 

p 

p 

p 

£ 

•H 


© 

P 

1 

1 

(X 

0 

X 

X 

P 

© 

IX 

X 

© 

IX 

IX 

IX 

P 


p 

0 

W 

TJ 

o 

X 

1 

© 

© 

© 

XI 

X 

© 

0 

X 

X 

X 

0 





■H 

p 

© 

X) 

1 

1 

u 

•H 

© 

1 

o 

© 

© 

© 

© 




© 


1 


© 

X* 

tJ 

0 

> 

1 

> 

IX 


1 

1 





d 

0 

rH 

d 

P 

TJ 

0 

O 

•H 

a* 

cr 

X 

© 

p 

© 






O 

O 

o 

3 

© 

© 

O 

XI 

© 

© 

© 

bO 

bO 

rH 






■H 

X 

*H 

(X 

• • 

• • 

• • 

. . 



. . 









P 


p 

e 

• • 

• • 

• . 

. . 

. . 


. . 

. • 

. . 

. . 






O 

t» 

u 

o 

p 

p 

P 

P 

p 

p 

p 

p 

P 

P 






§ 

03 

§ 

u 

p 

p 

P 

P 

P 

p 

p 

p 

P 

P 






P 


p 














<D 









bO 

d 

■H 

P 






































• 


P 


- 






II 


























* 






CO 


z 
































Z 




z 


1 

*« 







d 
































o 

z 

D-- 






ID 


























P 




II 

* 

p 








CD 


























CO 


•i 



z 

1 








i— 1 


























(D 


- 




r— 1 


z 


• 




O 





It 






















•* 


* 

CD 

1 

iD 

C^- 



z 

z 



o 



























- 

cr 

z 



p 

c^- 

II 

z 





X> 





s 



II 













II 





z 


CD 


bO 

z 

CD 



z 

1 

bO 

II 







CD 






















cr 

d 

<D 

d 


P 

z 

/— N 



CD 



• • 





CD 
















9 




— 

II 

a) 


CD 

•rH 

II 



CD 

II 

z 

d 

d 







r-H 



cD 













IC3 

CD 






d 


> 

P 



II 





d 


✓— N 





O 



CD 



II 













V 

✓ \ 


z 


P 




bO 

/-'N 

II 


CD 







O 



rH 






ii 







rH 



s 


Q) 




to 

CD 

II 


d 

CD 


z 

rH 


d 





X> 



O 



9 










O 



CCJ 

— 

w 

— 

II 

— 

1 



CD 





O 


o 








o 



cD 



d 







o 



® 


bO 




o 

bO 

/— \ 

V—/ 

p 

bO 

CD 

II 

O 


*H 





** 



x> 



a> 



cD 







x> 



r — i 

II 

a 

ii 

/^N 

It 

p 

d 

CD 

bO 

p 

a 

w 


X> 


CO 











i — t 



CD 










o 


*H 


CD 


i 

*H 


d 

CO 

•H 

bO 

✓ — \ 



CO 





✓"-X 



* * 



o 



rH 







* • 



o 


p 

/ — \ 

w 


P 

P 

bO 

•H 

1 

P 

d 

CD 

• • 


CD 











o 



O 










x> 

® 

p 

CD 

bO 

CD 

PL, 

P 

d 

P 

o 

P 

•H 

v-/ 



P 





d 



/-N 



XI 



O 












CO 

v-/ 

d 


X 

CO 

*H 

P 

p 

CO 

P 

bO 



PL 





o 









X> 











bO 

1 

bO 

•H 

bO 

CD 

1 

P 

CO 

1 

1 

P 

d 



X 





•rH 



d 



* • 










M 




d 

o 

d 

p 

d 


o 

P 

1 

p 

o 

CO 

*H 

d 


CD 





CO 



o 






* * 







o 




■H 

p 

•H 

p 

•rl 

A 

p 

CO 

o 

PL 

p 

1 

p 

o 


• • 



p 


CO 



•H 

















P 


P 

CO 

P 

II 

1 

1 

p 

X 

1 

o 

p 

*H 


• ♦ 



o 


CD 



CO 






/"N 







(0 




P 

P 

P 

1 

P 


p 

o 

1 

CD 

p 

p 

(0 

CO 


P 





p 



CO 



d 










CO 




CO 

PL, 

CO 

o 

(0 

V 

PL 

p 

p 


PL 

1 

1 

CO 


P 





PL 



CD 



o 



d 







® 




» 

X 

1 

p 

1 

CD 

X 

1 

PL 

A 

X 

p 

o 

CD 




P 

CD 


X 



P 



•H 



o 







P 




o 

® 

O 

1 

o 

w 

CD 

p 

X 

II 

CD 

PL 

p 

P 


• • 


O 

v-/ 


CD 



PL 



CO 



■H 







PL 



CO 

p 


P 

p 

p 

d 


PL 

CD 



X 

1 

PL 

/-V 




d 


• • 



X 



CO 



CO 







X 



® 

1 

A 

1 

PL, 

1 

o 

A 

X 



A 

CD 

p 

X 

CD 

CD 



o 


♦ • 



CD 

P 


CD 



CO 







® 



p 

p 

II 

p 

X 

p 

■H 

II 

CD 

A 

CD 

II 


PL 

CD 




CD 

•H 


P 



• • 

O 


P 










* * 



PL 

pu 


PL, 

CD 

PL, 

p 



II 

w 


A 

X 

• * 

d 

w 

p 


P 


P 



• • 



CL 



p 







* * 



X 

x 


x 


x 

o 

/— N 

A 


rH 

/■— \ 

II 

CD 

• * 

o 

P 

o 

d 

U 

/-V 




P 



X 



PL 







P 



® 

0) 

a> 

CD 

A 

CD 

<d 

CD 

|| 

/—x 

rH 

CD 



p 

•H 

PL 


o 

(D 

CD 

• • 


CD 

P 

CD 


CD 



X 







P 



* • 


V-/ 


|| 


p 

V-/ 


CD 

iD 

V-/ 

/-N 

A 

p 

CO 

X 


•rH 

P 



p 





• • 

p 


CD 








p 


* • 

A 

d 

A 


A 

p 

d 


w 

U 

d 

CD 

II 


CO 

CD 

CD 

CO 

P 

d 

CD 

o 

d 

• • 

d 

-t-n 

• • 

o 


• • 

P 

P 

p 

P 

p 


* • 

o 


p 

|| 

o 

II 


|| 

X 

o 

CD 

P 

1 

o 

w 


. . 

CD 

1 

w 

CO 

X 

o 



o 


o 

CD 

P 



♦ ♦ 

o 

O 

o 

O 

o 





p 


■ H 


CD 


CD 

•H 

vy 

CD 

o 

•H 

d 



P 

CD 

d 

CD 

CD 

•H 

w 

/*N 

•H 

CD 

•rH 


P 

/-N 

<D 

P 







® 

/a 



✓ — \ 

CO 



r— \ 

I 

CO 

p 

P 

•iH 

CO 

o 

CD 

CD 

PL 

> 

o 

P 

1 

CO 

P 

CD 

CO 


CO 

P 


CD 

w 

P 

o, 

/-> 






® 

/-N 

• * 

CD 

CO 

CD 

d 

CD 

CD 

CO 

d 

CD 

CO 

CO 

•H 



X 

•H 

•H 

PL 

CD 

CO 

PL 

w 

CO 

N-/ 

CO 

d 

. ♦ 


d 


CD 

CD 

<0 

CD 

CD 


w 


® 


w 

<D 

w 

o 

N— / 

bO 

CD 

(3 

a 

d 

CD 

W 

d 


CD 

P 

(0 

X 

bO 

CD 

X 

d 

CD 

P 

CD 

CO 


d 

o 

• • 

w 

N-/ 

v-/ 

w 



P 

d 


® 

Ph 

P 

0 

•H 

d 

d 

P 

p 


•H 

p 

CO 

o 

P 

1 

CD 

CO 

CD 

d 

P 

CD 

o 

P 

PL 

P 

P 

CD 

o 

•rH 


d 

d 

d 

d 

d 

d 

PL 

o 

d 


o 

pL, 

o 

CO 

o 

(3 

PL 

CO 

p 

P 

PL 

CD 

•H 

PL 

CD 

O 

CD 

1 

<9 

PL 

1 

•H 

PL 

X 

PL 

CO 


•H 

to 

CD 

o 

o 

o 

o 

o 

o 

X 

•H ■ 

O 

w 

•H 

X 

•rH 

CO 

•H 

p 

X 

d 


P 

X 

P 

CO 

X 

P 

•H 

P 

CD 

P 

X 

CD 

CO 

X 

<D 

X 

d 

P 

10 

to 


•H 

•H 

•rH 

•H 

• H 

•rH 

® 

CO 

•H 

P 

(0 

a> 

CO 

CD 

CO 

x> 

CD 

o 

PL 

d 

CD 

PL 

CO 

CD 

(D 

r— C 

PL 

P 

X> 

CD 

> 

CO 

CD 

1 

CD 

o 

PL 

10 

® 

P 

CO 

CO 

CO 

CO 

CO 

CO 

1 

CO 

CO 

CL 

CO 

i 

CO 

p 

CO 

0 

I 

CJ 

1 

•H 

1 

X 

CD 

1 

•H 

PL 

X 

cD 

P 

1 

•H 

CD 

1 

U 

1 

u 

X 

CD 

p 

PL 

CO 

CO 

CO 

CO 

CO 

CO 

P 

® 

CO 

X 

CD 

>> 

a> 

PL, 

CD 

CO 

P 

1 

>% 

1 

>> 

CD 

P 

P 

P 

•H 

CD 

d 

CO 

>> 

P 

P 

P 

•H 

>» 

1 

CD 

P 

CL 

X 

CD 

© 

CD 

a) 

<S> 

<J) 

O 

P 

® 

® 

p 

y ' | 

p 

x 

P 


u 

rH 

CD 

rH 

P 

1 

PL 

CD 

d 

P 

| 

CD 

l 

r-H 

♦H 

PL 

O 

a 

P 

rH 

1 

PL 

X 

CD 

P 

P 

p 

P 

P 

P 

1 

PL 

p 

1 

p, 

PL, 

PL, 

® 

PL, 

bO 

iD 

<D 


cD 

•rH 

CD 

X 


CD 

rH 

a> 

P 

bO 

PL 

XJ 

X 

cD 

o 

•rH 

cD 

> 

X 

CD 

1 

PL 

PL 

CL 

PL 

CL 

CL 

XJ 

X 

PL 

P 

x 

•iH 

X 

i 

X 

d 

P 

P 

1 

•H 

P 

P 

<D 

O 

d 

P 

XJ 

<D 

d 

•H 

XI 

CD 

P 

p 

P 

P 

cr 

CD 

1 

cr 

X 

X 

X 

X 

X 

X 

9 

® 

X 

o 

m 

p 

a> 

> 

CD 

•H 

P 

CD 

d 

O 

d 

<D 

1 

PL 

o 

a 

•H 

O 

•H 

P 

(D 

1 

P 

cD 

d 

a) 

CD 

1 

> 


CD 

a> 

CD 

CD 

a> 

CD 

iD 

1 

® 

d 

i 

y \ 

i 

cr 

1 

P 

Xi 

P 

CD 

CD 

a) 

bO 

P 


PL 


> 

d 

p 

r-H 


x> 

X> 


CD 

p 


> 

cr 


1 

1 

1 

1 

i 

1 


XJ 

1 


.p 

0 

a> 

CD 

p 

P 

0 

•H 

PL 

PL 

'd 

CD 

O 

d 

X 

d 

•H 

o 

p 

P 

d 

X) 

d 

d 

X> 

•H 

d 

cr 

CD 

d 

cr 

CD 

CD 

p 

® 

P 

d 

9 

P 

d 

r-H 

a 

d 

d 

O 

(0 

CO 

r— C 

O 

CO 

•H 

d 

d 

o 

•H 

CD 

o 

*H 

XI 

O 

CO 

a 

o 

•rH 

iD 

CO 

o 

•rH 

•rH 

rH 

o 

CD 

P! 

o 

•H 

CD 


bO 

bO 

rH 

i — \ 

o 

•rH 

iD 

o 

O 

•H 


# t 


. . 

, , 

, . 

. . 

, , 

. . 

. . 

. . 

. . 

, . 

p 

. . 

P 

• . 

. . 

. . 

. . 

P 

* • 

. • 

P 

• . 

• ♦ 

P 

• • 

• • 

P 

• ♦ 

• • 

• • 

• • 

• • 


P 

* * 

* * 

P 

«fH 


4h 

P 

P 

P 

P 

P 

P 

P 

P 

Hh 

P 

O 

P 

U 

P 

p 

P 

P 

o 

P 

P 

o 

P 

P 

o 

p 

p 

O 

P 

p 

P 

p 

P 

P 

o 

P 

p 

o 

P 

P 

P 

P 

P 

P 

P 

P 

P 

P 

P 

P 

P 

s 

P 


P 

p 

p 

P 

s 

P 

P 

d 

P 

P 

i 

p 

P 

i 

P 

p 

P 

p 

P 

P 

i 

P 

p 

§ 














P 

P 


p 





p 

p 



P 



4-f 



p 







p 



p 



to 

a 

o 


II 

to 



(0 

II 

q 

a) 


to 

p 

q 

CD 

a* 

© 

i — \ 

X 

© 

o 

© 

»H 

o 


O 

43 

•H 

O 


O 

43 


CO 

© 




O 



P 

P 

P 


























■H 




o 

o 


























CO 



© 

•H 

•H 


























(0 



43 

to 

© 


























© 



P 

© 

© 


























P 




© 

© 


























P 



P 

p 

P 


















✓'-N 








X 



© 

(X 

P 







p 









p 


rH 








© 



> 

X 

X 







o 









o 


© 








• • 


/-N 

O 

© 

© 


















w 








• . 

p 

© 


« . 

. . 







N 



/•—N 








p 






P 



o 

\-/ 

b0 

• . 

. . 







CN 









CN 


p 






o 


P 


rH 

P 


<H 







© 









© 


X 










rH 

•H 

P 

P 







v_^ 

P 


rH 








© 








• . 

© 

© 

P 









p 

o 


© 






p 








© 




U 

© 

• • 

• • 



P 




p 





p 




p 


© 


P 




' — / 


© 

P 

1 

TJ 





O 



p 

X 

/^S 


P 


O 



P 

X 


> 


O 



p 

a 



© 

u 

P 

H 

CN 






o 

© 

CN 


P 





o 

© 

CN 

•H 





o 

o 

© 

N-/ 

P 

•H 

O 

© 

© 


P 

/~\ 

P 



1 

© 


X 

P 


P 



1 

© 

P 

P 

/-*\ 

p 



•i-f 

V-/ 

P 

© 

(0 




■H 

o 

CN 

O 

P 

r~N 

© 

V-/ 

CN 

© 

o 

CN 

O 

P 


© 

v-/ 

© 

O 

CN 

o 

P 


CO 

P 

P 

§ 

P 

rH 

cr 


© 


© 


O 

CN 

> 

p 

© 

1 


© 


o 

CN 

> 

P 

U 


© 


O 

CN 

to 

O 

X 

© 

♦H 

© 

© 


v-x 

o, 

w 



© 

•H 

p 


© 

r-N 

w 



© 

•H 

P 

•H 

/-N 

v-/ 



© 

© 

•H 

© 

P 

P 

P 

i 


P 

CN 

P 

CN 



P 

X 

P 

> 

CN 

P 

CN 

/-N 

N-/ 

P 

X 

rH 

CN 

P 

CN 



p 

(0 

1 

© 

P 

O 

CO 


P 

© 

P 

© 

CN 

p 

© 

© 

P 

•H 

© 

P 

© 

CN 

P 

© 

© 

P 

© 

P 

© 

CN 

P 

p 

CO 

P 

P 

P 

P 

© 


X 

V-/ 

X 


© 

p 

o 

1 

X 

P 


X 

v-/ 

© 

P 

O 

1 

•H 

v-/ 

X 

V-/ 

© 

P 

x 

© 

> 

1 

-H 


73 


© 

p 

© 

P 

w 

X 

•H 

© 

© 

•H 

P 

© 

P 


X 

*H 

© 

P 

P 

© 

P 


X 

© 

p 

o 

>> 

1 

© 

© 


1 

p 

1 

P 

P 

© 

rH 

> 

1 

73 

P 

1 

P 

P 

© 

rH 

> 

rH 

P 

1 

P 

p 

© 

1 

(X 

q 

© 

rH 


O 


o 

X 

P 

X 

P 

1 

P 

•H 

u 

73 

X 

P 

X 

P 

1 

P 

•H 

0 

X 

p 

X 

p 

1 

© 

X 

£ 


© 

to 

© 


«H 

© 

o 

© 

X 

P 

•H 

P 

•H 

© 

© 

o 

© 

X 

p 

•H 

P 

B 

© 

o 

© 

X 

P 

p 

© 

q 

1 

•H 

p 

P 


B 

1 

1 

| 

© 

© 

P 

•rH 

a 


1 

1 

1 

© 

© 

P 

■H 


1 

1 

1 

© 

© 

© 

1 

3 

P 

O 

p 

a. 


o 

p 

73 

> 

1 


«H 

73 

o 

V-/ 

P 

73 

> 

1 

> 

rH 

73 

w 

p 

73 

> 

1 


bO 

p 


© 

© 

© 



p 

o 

P 

CT 

cr 

o 

P 

73 

p 


o 

<3 

cr 

cr 

o 

0 

73 


o 

q 

CT* 

cr 

o 

© 

o 

p 

P 

Oh 

e 

p 


© 

p 

© 

© 

© 

p 

B 

© 

© 


13 

© 

© 

© 

p 

B 

© 


(3 

© 

© 

© 

p 

a 

p 

o 

O 

CO 

© 

o 











•H 








•H 








*H 

• • 

• • 

rH 

■H 



p 








© 

a 







© 

13 





• • 

• • 

P 

• • 

• • 

P 

P 



© 








© 

© 







to 

© 





4h 


o 

<H 


6 

U 



43 








rH 

43 







rH 

43 





P 

P 


P 

P — 

►H * 

3 


•H 

P 








© 

p 







© 

P 






CN 

© 

p 

p 

X 

<D 

I 

© 

> 

•H 

P 

© 

U 


P 

rH 

P 

a 


^ p 

'»-i o 

0) 



P 


p 



p 

o 

CN 

o 

P 

/-N 

p 


© 


o 

CN 

X 

s~~\ 

>>-/ 



© 

© 

CN 

P 

CN 



1 

© 

P 

© 

CN 

P 

p 

v/ 

X 

V-/ 

© 

P 

© 

P 

© 

p 

V_/ 

X 

& 

P 

1 

p 

p 

© 

o 

X 

P 

X 

p 

1 

p 

© 

o 

© 

X 

P 


1 

1 

1 

© 

© 

w 

P 

73 

> 

1 

> 


o 

q 

cr 

cr 

o 

Hh 

13 

© 

© 

© 

p 


Q) 
CO 
r — i 
0) 


a 

a> 

43 

P 


m « — <h 



0 

o 


0 

o 


§ 

© 

rH 

O 

O 

xj 


0 

0 

O 

O 

♦H 

•H 

© 

© 

© 

© 

© 

© 

0 

0 

P 

P 

X 

X 

© 

© 

<0 

<H 

0 

0 

t— 4 

CN 

© 

© 


<£8 


CN 

<p 


a 

o 


bo 

0 

•H 

0 

0 

M 


0 

O 

•H 

© 

to 

© 

0 

a. 


✓~N 

0 


0 


r-H 

0 



0 

0 


H 






<*3 

1 — 1 

O 

CN 

o 


© 

O 

CN 


p 

O 

CM 

© 





© 


© 


© 



v-/ 


© 


X 


© 

V-/ 



W 


i 




V-/ 



0 

/"N 

w 


© 


v_> 

0 

/ > 


0 

© 


0 

CN 

0 

CN 


P 

CN 

0 

CN 

i 

CN 

0 

P 

CN 


© 


0 

© 

P 

© 

P 

© 

CN 

X 

© 

P 

© 

0 

© 

P 

X 

© 


0 

CN 

1 


X 

Vw/ 

X 

V-/ 

© 

© 

w 

X 

V-/ 

o 

Vw/ 

X 

© 

w 

XJ 

© 

© 

© 

CN 

© 

0 

© 

0 


t 

0 

© 

0 

i 

0 

© 

1 

0 

© 

P 


rH 

© 

1 

P 

1 

P 

0 

> 

P 

1 

P 

XJ 

P 

1 

0 

P 

0 


0 

X> 

V-/ 

cr 

X 

0 

X 

P 

cr 

X 

0 

X 

0 

X 

0 

o 

X 

•H 

XJ 

P 

© 

cr 

© 

© 

o 

© 

X 

© 

© 

O 

© 

13 

© 

O 

0 

© 


© 

X 

X 

© 


| 

* 

1 

© 


1 

1 

1 


1 

1 


1 

© 

© 

© 

© 

i 

w 

0 

Xl 

> 

t 


0 

xl 

> 

w 

0 

XJ 

V_/ 

0 

Xl 

0 

1 

XJ 

© 


o 

0 

cr 

cr 


o 

0 

cr 


o 

0 


O 

0 


u 

0 

© 


0 

© 

© 

© 


0 

© 

© 


0 

3 

*H 

0 

3 

0 

♦H 

*H 

XI 

•H 





-H 




•H 



•H 



O 

g 

. . 

© 

© 

0 




© 

0 



© 

0 


© 

0 

© 

•H 

O 


o 

W 

© 




© 

© 



© 

© 


© 

© 

© 

0 

0 


© 

r — t 

X! 




r — 4 

xj 



rH 

XI 


i — 1 

Xl 

rH 

U 

© 

0 

0 

© 

0 




© 

0 



© 

0 


© 

0 

© 

3 

\ 

t 

p 


CN 

© 


P 

x 

© 

i 

0 

•H 

I 

0 

u 

0 

0 

0 


0 

p 

x 

i 

x) 

<tj 

© 

XJ 


^ 0 

^ 0 
0 W 

P * 
x a. 


i 

XI 

© 

© 

Xl 

© 


I 

XJ 

<tJ 

© 

XI 


© 

X 

0 

W 

© 

X 

© 

- 

0 

© 

© 

© 

© 

© 

© 

0 


0 

0 


P 

v—/ 

0 

0 

© 


TO 

p 

• * 

P 

0 


© 

0 

0 

1 

X 

<H 

© 

© 

II 

1 — 1 

© 

© 

P 

1 

© 

0 

XJ 

0 


1 

P 

o 

♦ • 



•H 

r""\ 

o 

1 

0 

XJ 

• • 

cr 

0 


0 

0 

Xl 

O 

© 

<0 

© 

© 


O 

1 

© 

U 

© 

0 

© 

> 

II 

•H 

0 

© 


Xl 



© 


© 

p 

0 

0 


• * 

• ♦ 

0 

0 

© 

X 


© 

© 




O 

© 

© 


XI 

© 

© 

© 

XJ 

•rH 

0 



0 

rH 


© 

rH 

w 

P 

II 

•rH 


© 

v-/ 


0 

© 

X 





0 


o 

© 

© 

bO 

II 



© 


XI 

0 

• • 

0 



•H 


w 

P 

• • 

•H 

bO 



rH 



X 

<H 

0 

0 



1 


© 

© 

0 

0 

•H 



0 


•H 

♦ * 

N-/ 

© 

0 




XJ 

© 

0 


© 

© 

© 

•H 

I 

0 

© 

01 

© 

O 


© 

© 

U 


Xl 

XJ 


0 


© 

0 

P 

P 

o 

O 

B 


© 

•rH 

© 

0 

0 

0 


© 

p 

U 


Xl 

1 

§ 

•H 

0 


Hh 




<H 

0 


0 

P 

X 

I 

XJ 

© 

© 

x! 

''w' 

0 

© 


© 

to 


cr 

© 

to 


0 

P 

X 

I 

4-> 

10 

© 

0 


0 

•• © 

0 *• 

0 , 

to 0 

I 0 

P W 

I I 


0 

p 

X 

1 

0 

to 

© 

0 


0 

to 


I 

0 

P 

X 

© 

I 

0 

*H 

x> 

I 

0 

u 

0 

0 

0 

10 

0 

o 

o 


bO 


0 

0 

© 

I 

0 

to 

© 

0 


0 

0 

CO 

I 

0 

CO 

© 

0 


bO bO 

0 0 


•H 

0 

0 

© 

I 

0 
0 

1 

0 

P 

X 


0 

0 

to 


0 

0 

© 

I 

0 
0 

1 

0 

P 

X 

© 


0 

0 

CO 


bO 

0 

•H 

0 

0 

CO 


0 
O 
■H 
CO 
CO 
© 

0 
P 
X 0 
© CO 
• • -H 


© 


bO 

0 

•H 

0 

0 

© 


0 

O 

•H 

to 

to 

© 

0 

P 

X 

© 


xl 

© 

© 

XI 


0 

© 


Xl 

© 


0 

© 



0 


1 

1 


<H 

1 

. . 


•H 


XI 

XJ 


0 

p 

Hh 


0 

© 

tcJ 

tsS 



X 

0 


0 


© 

© 


. . 

© 


/T>. 

© 

0 

XJ 

XI 



• . 

. . 

/—\ 


P 

w 

w 


© 

• . 


0 

• . 

X 

0 

0 


w 

m 

© 

P 


© 

<TJ 

© 


0 

0 


X 

0 

1 

U 

u 


P 


0 

1 

0 

0 

0 

0 


X 

*> 

P 

0 

© 

© 

O 

O 


© 

© 

X 

W 

1 

t* 

U 

U 


1 


© 

© 

0 

o 



0 

>> 

0 

1 

0 

© 

p 

0 

© 

0 

0 

W 


v—/ 

© 


© 

© 

© 

© 

•H 

0 

>> 

0 


XJ 

rH 

1 

0 

rH 

td 

0 

V-/ 

•H 

0 

© 

XJ 

•H 

1 

0 

P 

0 

V_-/ 



<d 

x> 

0 

3 

B 

© 




© 

1 

P 

1 

© 

iH 




xj 

0 

X 

0 

\ 






u 

© 

o 

w 

0 




© 

0 

1 

0 


© 




© 

0 

0 

0 

HH 

XI 




rH 

0 

■rH 

0 

•H 

0 




© 

© 

x> 

© 


0 

O 

O 

0 

O 

•H 

0 

U 


I 

0 

O 

0 

0 

0 

CO 

0 

o 

u 


0 

O 

O 

0 

O 

*H 

0 

U 


m 

TO 


© 



if atomic-expr(e) 
th9n 9xpr-to-string(9) 


II 


bO 

S3 ^ 








P 

© 











P 

N— / 



/■“S 








CO 

© 


II 










© 



© 




/ V 




« • 

X 


✓— \ 



•* 







© 


rH 

© 




✓— \ 




Ov 

XI 


© 

© 


© 


rH 




S3 

S3 



U 




© 




o 

«H 


U 

■t~i 


CP 


> 




•H 

1 


© 

xl 








CO 

P 


sx 

S3 

/*N 

rH 


X 




CO 

O 


CO 

*H 


© 

/~N 

© 


/ s 


a> 

1 


i 

1 

© 

> 

✓ — \ 

P 


Z 


P 

XI 


p 

P 

B 

1 

© 

© 


/ — \ 


SX 

*H 


o 

O 

© 

sx 

' — s 

rH 


z 


X 

♦ • 


1 

1 

P 

X 

bO 

1 


•> 


© 

♦ * 

y—s 

S3 

w 

© 

© 

S3 

o 


p 


• • 


© 

o 

6 

SX 

• • 

•H 

p 


p 


• • 

P 

W 

•H 

© 

N-> 

• • 

P 

1 


CO 



V-/ 

C^* 

© 

P 

43 

*H 

P 

p 


1 

✓—N 

P 

bO 

© 

© 

© 

P 

P 

CO 

sx 


rH 

p 


S3 

G 

© 

SX 

bO 


1 

X 


© 

p 

• » 

•H 

© 

P 

1 

S3 

II 

O 

© 


> 

CO 


P 

P 

SX 

S3 

© 


P 


rH 

• 

1 

© 

P 

<d 

X 

o 

rH 

S3 

1 

II 

© 

z 

rH 


(0 

sx 

© 

•H 


O 

P 


> 

w 

© 

© 

1 

i 

• • 

p 

II 

•H 

sx 

bO 

** 

z 

> 

fi 

o 

m 

♦ ♦ 

u 


CO 

X 

S3 

© 

* 


© 

p 

© 

4h 

S3 

P 

CO 

m 

*H 

V-/ 

p 

P 

S3 

1 

43 

P 

3 

© 

© 


P 

C^- 

p 

p 

1 

XI 

1 

w 


bO 

P 

II 

P 

CO 

CO 

CO 

© 

•H 

© 

cr 


© 

SX 


CO 

S3 

1 

1 

r — 1 


e 

© 

• > 

P 

X 

bO 


© 

X 

X 

43 

II 

<0 

w 

<H 

S3 


(D •• M ^ ^ S3 p -H 

•• h © P p X ttf) I ** A 

••PPSX©©©s3® 

<HPPIUUTJ-HiHW S3 

P©WT?s3S3S3P,OE S3 © 

I © O O *H p © © © rH 

•• •• rH <D U O I W X P r-i '-s 

© S3 p © © w «h 

h 

p © w P S3 ^ P 

rH W V (H 41 H P P -H © 


© 

t 

•H 4-> 

© P 

p 

.. 

p 

rH 


> 

X P 


W 

© 

• • 

© 


P 


© 


S3 

i 


rH 


P 

V-/ 

1 — 1 


O 

p 

P 



© 

p 



U 

© 

v-r 

S3 


1 

© 



S3 

p 


© 


P 

rH 




4h 

43 


© 




o 

w 


P 


P 

© 



•H 






© 



P 

p 





rH 



u 

© 





© 



P3 

rH 








(r9t-str <- concat(ret-str,"(" ,expr-to-latex(first(params))) ; 
(anumarata i over [2.. Ian] do 
rat-str <- concat(rat-str , 

expr-to-latex(params (i) ) ) ) ; 
rat-str <- concat (rat-str, ")"))); 


This function is grouped by binding precedence of the operators 
(to determine if parenthesis insertion is necessary) . 
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2) If a parameter is a Fortran PARAMETER, then its corresponding 



rf :: call-argument must have a "mode" rf : :unit-mode of 
’ FRET :: CONSTANT [which I found out indicates that it’s 
a PARAMETER] . 
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rlt : : sc-formal-direction(x) in ’rlt:: out, 

’rlt : : in-out ft 

rlt : : sc-f ormal-direction(y) in ’rlt:: out, 

’rlt: : in-out) 

function compute-mouts( this-sys : rf :: system-analysis ) : set(string) 
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7.5 Amphion Domain Theory Coverage 



Want to conver the call graph (structure chart) into a relation so 
7,7, that we can compute its transitive closure. Also, we want to remove 
any edges to non user defined nodes. 
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"VDIST" , 
■'VEqu" , 
"VHAT" , 
"VMINUS" 
"VPRJP" , 
"VSEP", 
"VSUB" 

function get-results() : set(string) 
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"Given a set of names of routines in the library and the call graph, 
return the set covered-parameter-descriptors that summarize these entities" 
function expand-routine-names-f rom-cg( routine-names : set(string). 
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Author’s note. You might think a transform ( — >) would be more 
appropriate here, and you would be right. Unfortunately , the 
transform equivalent of this unearthed a bug in Refine 4.0-Beta. 



fa(q : covered-parameter-desc) 

(q in *COVERED-DATAFLOWS* => 

(p. routine-name = q. routine-name) => 
retset <- retset with <p. routine- 
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Letovsky has observed that programmers engaged in software understanding activities typically 
“how” questions and “why” questions [17]. The former require an in-depth knowledge of the 



programming language and the ways in which programmers express their software designs. This 
includes knowledge of common algorithms and data structures and even concerns style issues such 





The lines of code in NPEDLN that actually compute the nearest point are somewhat hard to locate. 
One reason for this has to with error checking. It turns out that SPICELIB includes an elaborate 
mechanism for reporting and recovering from errors, and roughly half of the code in NPEDLN is used 
for this purpose. We have indicated those lines by shading in Figure 2. The important point to note 
is that although it is natural to program in a way that intersperses error checks with computational 
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Figure 1; NPEDLN minus comments and declarations. 
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Figure 2: Code with error handling highlighted. 




Figure 3: The residual code without the error handling plan. 





Figure 4: Code with scaie-unscale plan highlighted. 
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In this paper, we present a characterization of interleaving incorporating three aspects that make 
interleaved code difficult to understand; independence, delocalization, and resource sharing. We 
have distilled this characterization from an empirical examination of existing software — primarily 

2 The computation of DIST using VDIST is actually the last computation performed by the subroutine IPELPT, which 
■ PEDLI calls; we have pulled this computation out of IPELPT for clarity of presentation. 
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Programmers solve problems by breaking them into pieces. Pieces are programming language im- 
plementations of plans, and it is common for multiple plans to occur in a single code segment. We 
use the term '‘interleaving” to denote this merging. 
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The U scale-unscale ,, pattern found in NPEDLN is a simple example of a more general delocalized 
plan that we refer to as a reformulation wrapper , which is frequently interleaved with computations 
in SPICELIB. Reformulation wrappers transform one problem into another that is simpler to solve 



SUBROUTINE MPEDLN (A, 9, C, LINEPT, LINEDR , 
PNEAR, CIST) 
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can also help detect when the delocalized plan is incomplete, as it was in an earlier version of our 
example subroutine whose modification history includes the following correction: 
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CALL SURFPT ( SCLPT, UDIR, SCLA , SCLB, 
SCLC, PT ( 1 , 1 ) , FOUID(l) ) 
CALL SURFPT ( SCLPT, OPPDIR, SCLA, SCLB, 
SCLC, PT ( 1 , 2 ) , FQUID(2) ) 
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resource (variable, value, control flag, data structure slot, etc.). 
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incomplete model of its application domain. We are targeting our detection of interleaving toward 
elaborating the existing domain model. We are also looking for ways in which the current knowledge 
in the domain model can guide detection and ultimately comprehension. 




3.2 Extracting Preconditions 
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3.3 Finding Interleaving Candidates 



3*3.1 Routines with Multiple Output 



Our tool bases its analysis on the structure chart (call graph) objects that the Software Refinery 
creates. The nodes of these structure charts are annotated with direction information about param- 
eters. The resulting analysis showed that 25 percent of the subprograms in SPICELIB had multiple 
output parameters. We were thus able to focus our work on these routines first, as they are likely 
to involve interleaving. 
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We used the Software Refinery from Reasoning Systems in our analyses. This comprehensive toolkit 
provides a set of language-specific browsers and analyzers, a parser generator, a user interface builder, 
and an object-oriented repository for holding the results of analyses. We made particular use of two 
other features of the toolkit. The first is called the Workbench, and it provided pre-existing analyses 
for traditional graphs and reports such as structure charts, dataflow diagrams, and cross reference 


<D - 
bO X 

ce % 

3 2 

3> 3 

Cl 

«5 > 


V C « 
Cu -r 


2 c S 
a o f 


<d 

to 

O 

CO 

'o 

w 

g 

q^ 

,G 

O 

<4-4 

6 

o 

ct 


£ 

o 

« 3 

t-4 

bO 

JD 

Z 

<v 

CO 

qj 

i_i 

c 

o 

4-> 

jD 

O 

«-( 

a 

4-3 

CO 

<v 

G 

■w» 

' a 

"a 

■w 

a 

<L» 

o 

c 

o 

c 

cd 

to 

2 

CO 

bC 

C 

r -1 

flow 

H 

(O 

CO 

jaJ 

rt 


G2 


a 

>— i 

<v 

'a- 

CD 

E 

bO 

E 

o 

u 

‘3 

CO 

t*- 

o 

x? 

G 

aj 

qj 

G 

"o 

O 

CO 

<D 

I- 

>» 

tc 


3 


qj 

ff5 

X 

G 

•+-> 

«3 

q> 

IS 


a} 


X 

<D 

fli 

co 

CD 


rtJ ° g 

c a* 2 

ccj cd g 

C a> 


G o G 

cr 

CD CD X 

-C G 

T3 H 


CD XJ 

$ a; H 


^ ^ a 

ctj a 


g 2 * 

C +J 


£ 'S * 

a w 
< o ° 

■» j£ O 

qj co O 
C . 
<d X 


-k-o qi 

be « 
c .y s 

'S £• 2 

<D T" -G 


c 

X 

c 

M 

>» 

_o 

k-4 

JS 

B 

CO 

-*-o 

CJ 

O 

CO 


q^ 

bO 

G 

q; 

E 

G 



-C 

0 

O 




lu 


CD 

-kj 

<4~ 

J3 

4-? 

a 

-X 

«3 

H 

1-4 

bO 

CO 

G 

o 

-G 

CC? 

u* 

-*-5 

O 

CO 

3 

CD 

G 

+j 

e 

O 

t~> 

CL 

O 

u 

bJO 

_G 

CO 

jQ 

cc3 

4^ 

3 

CO 

4) 

eC 

o 

G 

tC 

cS 

u 

cc3 

O 

u 

n, 

G 

O 

a) 

-o 

CD 

3 

XI 

q^ 

3 

4-) 

«3 

U 

<D 

~G 

-*-> 


_ (O u O 

g bO 

<L> 3 .S 


o <t 
g 

cb bO 




. the representation must support multiple views of the program as the interaction of plans at 
various levels of abstraction, since interleaving may occur at any level of abstraction. 
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non-local relationship between the components of the 
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ent reasons. One is that there may be an inherently - intermediate data results. Their implementations 



c 

o 

CJ 


* x c 
u ~ 

® 7: 

X +* ? 

u £ 

bo « 2 

c ® c5L 


flS G — s 

o « a 

a> 0> "D -n 

S fi .2 1 

a H a £ 


CO 

G 

CD 

pJG 

d 

<v 

-M 

o 

u 

o 

CD 

1-4 

Oj 

(-} 

The 

"O 

3 

3 

CD 

d 

bO 

CO 


g 

»~< 

a 

6 

0 

U 

G 

’ u< 

ccJ 

.22 

<D 

co 

-4-J 

G 


o 


J2 


CD 

3 

o 


CO 

3 

G 

o 


I Ui 

J c o 

CD ^ 

0 -M X* 

* a ?t: 

3 o -t* 

o O 

\4>f 

; ^ G 

j O <D 

5 c c 
>> 2 

g ^ D. • 
; ^ <d w 
; C ~o <3 

V a .2 

<D 

0.2 g 

' ^ as <2 

! 3 G — * 

; c o o3 

• e 3 

1 * 3 ^ 
; *S?^ 

’ TJ 

! £ $ .3 

O -2 0> 

2 X 

o> £ ** 

*5 w> .£ 

C (d 

c ^ 
— a.S 

^ 3 «J 

<v o a 

W U C 


.S g 3 * 

- ai.s 
•- - - -5 
^ S'j 


c 5 o 

S te '5 s 
•S =S & o 


» '° E -B 

o £ 5 5 

s r a §. 

<2<2 $ f 

o> «> £ y 
a! o 3 
Ebb" 

’35 a) G 

x o *> 

I 

jJq S «i ty 

fl 5 « -O 

"C <U B Q. 

J E - 3 

*J3 cC a> 

C/) c*> G 

flj <D X .2 


B 

<-*-t . 0) «J 

O co u. *-< 

<v bO 

4) ® (U O 

co O c— ■ »— « 

3 cx 73 a 


G js O 

- - £ 
bC M «- 
G C ° 
•rr u 
ii +j c 
rt <d .G 

r-> t-> 

To a o 

<D <u - 
U ^ 5 

t- G «s 
3 <D 

O C ”] 
co • — 3 

£ >> * 
w u 

m "3 w 

Ja -SPg 

>> E ■ 
~ * £ 
3 S Si 
« 8 a 

*T3 «3 c-. 

^ E 

CD -t-9 fl3 

_G -— ' »-. 

^ -u bO 

O 1 

■a'5& 

§ -a *3 . 

£ $ <u 

bo y CO 

— j O 

c g a 

^ X *- 

o 3 

+3 a 


= 3 

* 5 > 


w o pO 


G Cl o 

fli J -4 

^ V 3 
X O 
2 co 

~G -w aj 

fe *3 

bO 

W -G <y 

2 5 jg 

O *-•* 


%s % 


f- jp 

ro J h p 

► - <<£ w 2 

i j u a: w 


5 a - 

3 > 53 

HI 

ja bp ^ 

3 lc "c 

co t: 

u S' 

E .S ° 

S to C 


i2 | -| 
3 jj i 
£ o ^ 

- G ^ 

V o c , 

X 3 * 3 


■q g , 

* J 2 

G (rt 
«5 M 2 

O t; 4) 


. “ <e -o 
— ^ b c 
g be % E 

a .s £ 2 

a g c " - 
w M .5 2 
3 x v o 
E H rg « 
o a £ 

-G 0) 


bO m —i 

rt pj ™ 

.G G 

>~o — £ 

s >> s 


S ^ a 
‘ 0 ^ -2 

• T? CD *C 
0 C ♦** 
G co 

cx 3 ;g 

G O OC 

> +J 

<D > 

S £? o 
5 S 

O -<-> cti 

co 

c o 3 

E G ^ 

° c> 

*G 3 


G £ ^3 
•-* 2^ o 
_ G <D 

CO <D 

g “T3 
2 T) ^ 

'3 c m 

.S S i 

E .2 o 

73 - 2 
Ou 5 


5 <D a; 

.2 *-« xj 

CD 

£ <D 72 
-5 -o X 

^ 3 


O bO ~ 

£ .S -o 
E ■§ .§ 

Sort 


3 

co 

CD 

t~, 

CL 

3 

L 

CO 

CD 

u> 

CD 

’t-s 

& 

T3 

G 

CO 

E 

»-4 

o 

O 

*§ 

G 

<D 

CD 

£ 

<D 

t~> 

ccj 

X 


CD 

G 

G 

U-t 

CD 


CO 

bO 

G 

. — . 


<D 

a> 


G 

CD 

CD 

f-i 

co 

l-r 

cd 

X 

<D 


bO 

G 

3 


X 

3 

E 

«} 

O 

CL 

-D 

<D 


•w 

o 

X) 

*M 

w 

o 

* 

1 

"33 

«3 

CSJ 

a? 

u 

u. 

«3 

X 

3 

c 

<*-4 

o 

CO 

nj 


3 

O 

CO 

o 

3 
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piiightmg the precondition checking code. see only instances of interleaved code fragments. In 

In principle, all these checks can be performed be- reviewing the design history, however, we may find 
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